SQ
Product
Squid
37
CVEs
0
On KEV
–
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 0Low 0
Watch
Add Squid to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2009-0478 | – | Feb 8 | Squid 2.7 to 2.7.STABLE5, 3.0 to 3.0.STABLE12, and 3.1 to 3.1.0.4 allows remote attackers to cause a denial of service via an HTTP request with an invalid version number, which… Affected: 2.7.stable1; 2.7.stable2; 2.7.stable3; 2.7.stable4; 2.7.stable5; 3.0.stable1; +16 more |
| CVE-2008-1612 | – | Apr 1 | The arrayShrink function (lib/Array.c) in Squid 2.6.STABLE17 allows attackers to cause a denial of service (process exit) via unknown vectors that cause an array to shrink to 0… Affected: 2.6.stable17 |
| CVE-2007-1560 | – | Mar 21 | The clientProcessRequest() function in src/client_side.c in Squid 2.6 before 2.6.STABLE12 allows remote attackers to cause a denial of service (daemon crash) via crafted TRACE… Affected: 2.6.stable1; 2.6.stable2; 2.6.stable3; 2.6.stable4; 2.6.stable5; 2.6.stable6; +5 more |
| CVE-2007-0248 | – | Jan 16 | The aclMatchExternal function in Squid before 2.6.STABLE7 allows remote attackers to cause a denial of service (crash) by causing an external_acl queue overload, which triggers an… Affected: 2.6.stable6 |
| CVE-2007-0247 | – | Jan 16 | squid/src/ftp.c in Squid before 2.6.STABLE7 allows remote FTP servers to cause a denial of service (core dump) via crafted FTP directory listing responses, possibly related to the… Affected: 2.6.stable1; 2.6.stable2; 2.6.stable3; 2.6.stable4; 2.6.stable5; 2.6.stable6 |
| CVE-2005-3322 | – | Oct 27 | Unspecified vulnerability in Squid on SUSE Linux 9.0 allows remote attackers to cause a denial of service (crash) via HTTPs (SSL) Affected: 2.6.stable1 |
| CVE-2005-3258 | – | Oct 20 | The rfc1738_do_escape function in ftp.c for Squid 2.5 STABLE11 and earlier allows remote FTP servers to cause a denial of service (segmentation fault) via certain "odd" responses Affected: 2.0.patch1; 2.0.patch2; 2.0.pre1; 2.0.release; 2.1.patch1; 2.1.patch2; +34 more |
| CVE-2005-2917 | – | Sep 30 | Squid 2.5.STABLE10 and earlier, while performing NTLM authentication, does not properly handle certain request sequences, which allows attackers to cause a denial of service… Affected: through 2.5.stable10; 2.5.9 |
| CVE-2005-2796 | – | Sep 7 | The sslConnectTimeout function in ssl.c for Squid 2.5.STABLE10 and earlier allows remote attackers to cause a denial of service (segmentation fault) via certain crafted requests Affected: 2.0.patch1; 2.0.patch2; 2.0.pre1; 2.0.release; 2.0_patch2; 2.1.patch1; +34 more |
| CVE-2005-2794 | – | Sep 7 | store.c in Squid 2.5.STABLE10 and earlier allows remote attackers to cause a denial of service (crash) via certain aborted requests that trigger an assert error related to… Affected: 2.0.patch1; 2.0.patch2; 2.0.pre1; 2.0.release; 2.1.patch1; 2.1.patch2; +34 more |
| CVE-2005-1711 | – | May 24 | Gibraltar Firewall 2.2 and earlier, when using the ClamAV update to 0.81 for Squid, uses a defunct ClamAV method to scan memory for viruses, which does not return an error code… Affected: 2.6.stable1 |
| CVE-2005-1519 | – | May 11 | Squid 2.5 STABLE9 and earlier, when the DNS client port is unfiltered and the environment does not prevent IP spoofing, allows remote attackers to spoof DNS lookups Affected: through 2.5_stable9 |
| CVE-2005-0173 | – | May 2 | squid_ldap_auth in Squid 2.5 and earlier allows remote authenticated users to bypass username-based Access Control Lists (ACLs) via a username with a space at the beginning or… Affected: 2.0.patch1; 2.0.patch2; 2.0.pre1; 2.0.release; 2.1.patch1; 2.1.patch2; +32 more |
| CVE-2005-1345 | – | May 2 | Squid 2.5.STABLE9 and earlier does not trigger a fatal error when it identifies missing or invalid ACLs in the http_access configuration, which could lead to less restrictive ACLs… Affected: 2.5.stable1; 2.5.stable2; 2.5.stable3; 2.5.stable4; 2.5.stable5; 2.5.stable6; +3 more |
| CVE-2005-0446 | – | May 2 | Squid 2.5.STABLE8 and earlier allows remote attackers to cause a denial of service (crash) via certain DNS responses regarding (1) Fully Qualified Domain Names (FQDN) in… Affected: 2.0.patch1; 2.0.patch2; 2.0.pre1; 2.0.release; 2.0_patch2; 2.1.patch1; +34 more |
| CVE-2005-0241 | – | May 2 | The httpProcessReplyHeader function in http.c for Squid 2.5-STABLE7 and earlier does not properly set the debug context when it is handling "oversized" HTTP reply headers, which… Affected: 2.5.stable1; 2.5.stable2; 2.5.stable3; 2.5.stable4; 2.5.stable5; 2.5.stable6; +1 more |
| CVE-2005-0194 | – | May 2 | Squid 2.5, when processing the configuration file, parses empty Access Control Lists (ACLs), including proxy_auth ACLs without defined auth schemes, in a way that effectively… Affected: 2.0.patch1; 2.0.patch2; 2.0.pre1; 2.0.release; 2.1.patch1; 2.1.patch2; +32 more |
| CVE-2005-0718 | – | Apr 14 | Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service (segmentation fault) by aborting the connection during a (1) PUT or (2) POST request, which… Affected: 2.0.patch1; 2.0.patch2; 2.0.pre1; 2.0.release; 2.0_patch2; 2.1.patch1; +34 more |
| CVE-2005-0626 | – | Mar 8 | Race condition in Squid 2.5.STABLE7 to 2.5.STABLE9, when using the Netscape Set-Cookie recommendations for handling cookies in caches, may cause Set-Cookie headers to be sent to… Affected: 2.5.stable5; 2.5.stable6; 2.5.stable7 |
| CVE-2005-0174 | – | Feb 7 | Squid 2.5 up to 2.5.STABLE7 allows remote attackers to poison the cache or conduct certain attacks via headers that do not follow the HTTP specification, including (1) multiple… Affected: 2.5.6; 2.5.stable1; 2.5.stable2; 2.5.stable3; 2.5.stable4; 2.5.stable5; +10 more |
| CVE-2005-0175 | – | Feb 7 | Squid 2.5 up to 2.5.STABLE7 allows remote attackers to poison the cache via an HTTP response splitting attack Affected: 2.5.6; 2.5.stable1; 2.5.stable2; 2.5.stable3; 2.5.stable4; 2.5.stable5; +10 more |
| CVE-2004-0918 | – | Jan 27 | The asn_parse_header function (asn1.c) in the SNMP module for Squid Web Proxy Cache before 2.4.STABLE7 allows remote attackers to cause a denial of service (server restart) via… Affected: 2.0_patch2; 2.1_patch2; 2.3_.stable4; 2.3_.stable5; 2.4; 2.4_.stable2; +10 more |
| CVE-2005-0096 | – | Jan 25 | Memory leak in the NTLM fakeauth_auth helper for Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service (memory consumption) Affected: 2.0_patch2; 2.1_patch2; 2.3_.stable4; 2.3_.stable5; 2.3_stable5; 2.4; +21 more |
| CVE-2005-0095 | – | Jan 15 | The WCCP message parsing code in Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service (crash) via malformed WCCP messages with source addresses that… Affected: 2.0_patch2; 2.1_patch2; 2.3_.stable4; 2.3_.stable5; 2.3_stable5; 2.4; +21 more |
| CVE-2005-0094 | – | Jan 15 | Buffer overflow in the gopherToHTML function in the Gopher reply parser for Squid 2.5.STABLE7 and earlier allows remote malicious Gopher servers to cause a denial of service… Affected: 2.0_patch2; 2.1_patch2; 2.3_.stable4; 2.3_.stable5; 2.3_stable5; 2.4; +21 more |
| CVE-2005-0097 | – | Jan 11 | The NTLM component in Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service (crash) via a malformed NTLM type 3 message that triggers a NULL… Affected: 2.0_patch2; 2.1_patch2; 2.3_.stable4; 2.3_.stable5; 2.3_stable5; 2.4; +21 more |
| CVE-2004-2654 | – | Dec 31 | The clientAbortBody function in client_side.c in Squid Web Proxy Cache before 2.6 STABLE6 allows remote attackers to cause a denial of service (segmentation fault) via unspecified… Affected: 2.5_stable5 |
| CVE-2004-0832 | – | Nov 3 | The (1) ntlm_fetch_string and (2) ntlm_get_string functions in Squid 2.5.6 and earlier, with NTLM authentication enabled, allow remote attackers to cause a denial of service… Affected: through 2.5.6 |
| CVE-2004-0189 | – | Mar 15 | The "%xx" URL decoding function in Squid 2.5STABLE4 and earlier allows remote attackers to bypass url_regex ACLs via a URL with a NULL ("%00") character, which causes Squid to use… Affected: 2.0_patch2; 2.1_patch2; 2.3_stable5; 2.4; 2.4_stable7; 2.5_stable3; +1 more |
| CVE-2002-2414 | – | Dec 31 | Opera 6.0.3, when using Squid 2.4 for HTTPS proxying, does not properly handle when accepting a non-global certificate authority (CA) certificate from a site and establishing a… Affected: 2.4 |
| CVE-2002-0713 | – | Jul 26 | Buffer overflows in Squid before 2.4.STABLE6 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code (1) via the MSNT auth helper… Affected: through 2.4.stable6 |
| CVE-2002-0715 | – | Jul 26 | Vulnerability in Squid before 2.4.STABLE6 related to proxy authentication credentials may allow remote web sites to obtain the user's proxy login and password Affected: through 2.4.stable6 |
| CVE-2002-0714 | – | Jul 26 | FTP proxy in Squid before 2.4.STABLE6 does not compare the IP addresses of control and data connections with the FTP server, which allows remote attackers to bypass firewall rules… Affected: through 2.4.stable6 |
| CVE-2002-0163 | – | Mar 26 | Heap-based buffer overflow in Squid before 2.4 STABLE4, and Squid 2.5 and 2.6 until March 12, 2002 distributions, allows remote attackers to cause a denial of service, and… Affected: through 2.4_9 |
| CVE-2002-0068 | – | Mar 8 | Squid 2.4 STABLE3 and earlier allows remote attackers to cause a denial of service (core dump) and possibly execute arbitrary code with an ftp:// URL with a larger number of… Affected: through 2.4_stable_3 |
| CVE-2002-0069 | – | Mar 8 | Memory leak in SNMP in Squid 2.4 STABLE3 and earlier allows remote attackers to cause a denial of service Affected: through 2.4_stable_2 |
| CVE-2002-0067 | – | Mar 8 | Squid 2.4 STABLE3 and earlier does not properly disable HTCP, even when "htcp_port 0" is specified in squid.conf, which could allow remote attackers to bypass intended access… Affected: through 2.4_stable_2 |
Showing 37